Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2018-02-07 | CVE-2017-5133 | Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file. | Debian_linux, Chrome | 8.8 | ||
| 2018-02-15 | CVE-2017-18189 | In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service. | Debian_linux, Sound_exchange | 7.5 | ||
| 2018-02-23 | CVE-2018-7435 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function. | Debian_linux, Freexl | 8.8 | ||
| 2018-02-23 | CVE-2018-7436 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function. | Debian_linux, Freexl | 8.8 | ||
| 2018-02-23 | CVE-2018-7437 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function. | Debian_linux, Freexl | 8.8 | ||
| 2018-02-23 | CVE-2018-7438 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function. | Debian_linux, Freexl | 8.8 | ||
| 2018-02-23 | CVE-2018-7439 | An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record. | Debian_linux, Freexl | 8.8 | ||
| 2018-02-23 | CVE-2018-7320 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets. | Debian_linux, Wireshark | 7.5 | ||
| 2018-02-23 | CVE-2018-7322 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for integer wraparound. | Debian_linux, Wireshark | 7.5 | ||
| 2018-02-23 | CVE-2018-7323 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing. | Debian_linux, Wireshark | 7.5 |